$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35868697-b72e-333d-a100-dc3b5fc1f05e.roa File: 35868697-b72e-333d-a100-dc3b5fc1f05e.roa (raw, json) Hash identifier: sMy0T+kL/qfz+X7p7+KEGSWBXfwLsEt8Nh4zC7T7Qbs= Subject key identifier: AE:36:C5:8B:70:4E:ED:D7:32:5C:54:35:FB:4F:B1:02:D1:20:91:CA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F6C5840180E328C6C0C4485C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35868697-b72e-333d-a100-dc3b5fc1f05e.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 6167 IP address blocks: 174.254.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:40:18:0e:32:8c:6c:0c:44:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=93dac920-1297-4e98-8fa5-228f41ec5903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:5c:42:8b:7b:46:41:2d:54:12:0d:08:0f: 42:a3:46:2f:32:de:f0:10:42:4c:c3:1d:43:d0:ab: 0c:c6:72:5d:ae:f4:1a:45:8d:8a:8c:21:fe:1f:4f: be:c0:7e:13:da:74:39:1c:a0:46:23:27:aa:65:ec: 88:31:a2:5d:b6:a9:da:6d:8c:65:51:9f:ef:9e:4f: 41:20:56:2b:fc:81:20:9e:18:5a:8b:ee:57:26:28: dd:6c:d4:ca:35:09:f9:42:48:91:bb:4b:80:58:47: e0:16:c9:73:c7:07:70:15:8c:5d:0e:ad:01:76:4a: d7:b5:64:28:1a:71:da:98:6b:53:cd:df:9d:76:7b: bd:a3:2d:8a:9a:77:7c:80:fa:e4:a8:98:99:31:1b: 4a:07:de:4b:5b:fc:95:c3:43:03:23:62:66:7f:bc: 9b:a4:1d:45:b8:13:d8:b8:e4:19:1a:bf:d0:e1:e5: cf:a7:88:90:69:e4:69:02:06:2b:55:8e:f5:56:55: 1d:95:5c:5b:c2:84:b2:83:9e:32:4c:e1:c1:a2:13: 26:76:89:63:9d:c8:16:9d:1e:e6:dd:5d:ec:e4:f7: 07:c1:b2:12:11:5c:ef:98:69:2d:0d:13:50:09:7b: c1:fa:1b:49:fb:56:3c:8a:74:6e:ee:7d:6f:21:84: 98:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:36:C5:8B:70:4E:ED:D7:32:5C:54:35:FB:4F:B1:02:D1:20:91:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35868697-b72e-333d-a100-dc3b5fc1f05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.254.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:69:2f:a4:65:ba:36:5e:5f:95:34:06:21:22:f6:1e:78:9f: 1b:2e:a6:d6:b8:76:16:84:02:b6:ba:72:31:a2:97:0a:3e:92: 0e:81:03:03:46:70:f6:ef:c3:92:86:c9:25:05:9b:9a:2e:68: 4c:ee:51:c6:c6:90:4f:37:94:36:90:13:13:34:03:db:f9:e1: 43:30:e2:85:03:db:b0:e8:a7:4d:8d:80:fe:b3:93:af:fe:f8: 5e:85:68:9a:1e:da:c9:00:80:76:f3:e7:3d:5e:39:e3:84:a4: 52:83:5d:f4:34:20:6b:e2:f4:fc:7f:9b:da:c2:48:df:00:b4: 55:0e:1b:76:84:8f:43:d9:ec:b0:c6:04:2a:f6:97:06:30:3a: 8c:a2:57:71:38:92:0d:45:2c:c4:f7:4c:b7:e1:5c:f3:ec:59: 3f:a2:44:3a:73:20:fa:d5:ef:0f:f0:5d:6e:36:37:26:77:4a: e5:17:1d:78:3d:c1:eb:1f:6d:79:83:43:ce:99:e4:e0:4a:e2: 85:e9:af:23:ce:ae:3c:26:f3:10:e7:54:47:3b:a0:57:29:51: aa:65:5a:40:22:15:8d:84:22:4f:11:34:83:53:f0:8d:0e:9c: 65:d0:f9:5a:7d:9e:12:cd:45:15:27:24:8c:76:d5:b1:47:4c: 5e:96:dc:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWEAYDjKMbAxEhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk OTNkYWM5MjAtMTI5Ny00ZTk4LThmYTUtMjI4ZjQxZWM1OTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ9cQot7RkEtVBINCA9Co0YvMt7wEEJMwx1D 0KsMxnJdrvQaRY2KjCH+H0++wH4T2nQ5HKBGIyeqZeyIMaJdtqnabYxlUZ/vnk9B IFYr/IEgnhhai+5XJijdbNTKNQn5QkiRu0uAWEfgFslzxwdwFYxdDq0BdkrXtWQo GnHamGtTzd+ddnu9oy2Kmnd8gPrkqJiZMRtKB95LW/yVw0MDI2Jmf7ybpB1FuBPY uOQZGr/Q4eXPp4iQaeRpAgYrVY71VlUdlVxbwoSyg54yTOHBohMmdoljncgWnR7m 3V3s5PcHwbISEVzvmGktDRNQCXvB+htJ+1Y8inRu7n1vIYSYoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK42xYtwTu3XMlxUNftPsQLRIJHKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzU4Njg2OTctYjcyZS0z MzNkLWExMDAtZGMzYjVmYzFmMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrv4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChpL6RlujZeX5U0BiEi9h54nxsupta4dhaEAra6cjGilwo+kg6BAwNG cPbvw5KGySUFm5ouaEzuUcbGkE83lDaQExM0A9v54UMw4oUD27Dop02NgP6zk6/+ +F6FaJoe2skAgHbz5z1eOeOEpFKDXfQ0IGvi9Px/m9rCSN8AtFUOG3aEj0PZ7LDG BCr2lwYwOoyiV3E4kg1FLMT3TLfhXPPsWT+iRDpzIPrV7w/wXW42NyZ3SuUXHXg9 wesfbXmDQ86Z5OBK4oXpryPOrjwm8xDnVEc7oFcpUaplWkAiFY2EIk8RNINT8I0O nGXQ+Vp9nhLNRRUnJIx21bFHTF6W3K0= -----END CERTIFICATE-----Generated at Sat Oct 10 13:25:49 2026 by rpki-client